Cyber Incident Victim: Policía de Salta
Date:
Apr 2025
Location:
Argentina
Summary
The official Facebook account of the Policía de Salta was compromised by unauthorized actors, leading to a temporary loss of control and the posting of unapproved content. Cybersecurity specialists successfully restored access through activated digital security protocols, removing the illicit posts and reinforcing account protections. The organization acknowledged public support during the disruption and encouraged followers to resume engagement with its legitimate page for institutional updates.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
The official Facebook account of the Policía de Salta was compromised in an unauthorized access incident that occurred several weeks prior to April 1, 2025. The breach resulted in the loss of control over the social media page, with attackers making unspecified unauthorized publications during the period of compromise. The Dirección General de Ciberseguridad (General Directorate of Cybersecurity) initiated digital security protocols upon detecting the intrusion, launching an investigation to determine the scope of the breach and identify potential vulnerabilities exploited by the threat actors. This response framework involved specialized cybersecurity personnel working to contain the incident and prevent further unauthorized actions through the compromised account. The investigation process included forensic analysis of account activity logs and coordination with Meta's security teams to establish recovery pathways while maintaining evidentiary integrity for potential legal proceedings.
Through coordinated efforts between cybersecurity specialists and platform administrators, authorities successfully regained control of the Facebook account by early April 2025. The recovery operation involved restoring secure administrative access, eliminating all unauthorized content published during the breach period, and implementing enhanced security measures to prevent recurrence. Following account restoration, the Policía de Salta publicly acknowledged the resolution through official channels, expressing gratitude to followers for their patience during the disruption of normal communications. The institution invited community members to resume interactions with the verified "Policía de Salta" fanpage, confirming the resumption of standard operational communications for sharing institutional information and public safety updates. No secondary compromises or related incidents affecting other systems were reported following the account's recovery.